htmx
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of reference markdown files and documentation. It does not contain executable code, scripts, or automated tasks that could interact with the host system or network in a malicious way.\n- [SAFE]: External URLs and resource links target the official HTMX project domains and reputable content delivery networks (jsDelivr, Unpkg). These are well-known services used for distributing public libraries.\n- [SAFE]: The documentation actively promotes security best practices. It provides specific instructions on how to use hx-disable (and hx-ignore in v4) to sanitize user-generated content, how to implement CSRF protection, and how to configure Content Security Policy (CSP) headers to harden applications using HTMX.\n- [SAFE]: All documented JavaScript API usage and configuration options are standard features of the HTMX library. No obfuscation, hidden commands, or persistence mechanisms were detected in the skill content.
Audit Metadata